Cutting KYC cost without cutting controls.
Five levers move a fintech KYC budget: risk-based simplified due diligence, perpetual KYC, false-positive reduction, RFP discipline, and risk-mix design. Each reduces duplicated or disproportionate effort, not the standard of due diligence applied to any given customer. Ranked by impact, with a worked before-and-after.
SDD on the low-risk book | pKYC 60-80% periodic-review saving | RFP discipline 20-40% off published rates
The unit to reduce is effort, not standard.
KYC cost reduction is a proportionality problem, not a discount-hunting one. The largest avoidable costs on a fintech compliance budget come from applying the same depth of due diligence to a low-risk consumer that a high-risk corporate genuinely requires, and from investigating alerts that were never real. Both are removable without lowering the control standard on any individual customer. The FATF framework now says so explicitly: the February 2025 amendment to Recommendation 1 replaced "commensurate" with "proportionate", and the 22 June 2025 financial-inclusion guidance strengthened the language on simplified due diligence from "may decide to allow" to "should allow and encourage" in identified lower-risk situations.
The discipline is to cut where risk is genuinely low and hold or increase spend where it is not. A budget that cuts uniformly across the board is a control failure waiting to surface in a supervisory review. The five levers below are ordered by structural impact, and each one names the line it actually reduces.
Five levers, ranked by impact.
| Lever | Reduces | Effect | Basis |
|---|---|---|---|
| Risk-based simplified due diligence (SDD) | Largest structural lever | Cuts screening cycles and ops labour on the low-risk book | FATF February 2025 amendment to Recommendation 1 and the 22 June 2025 financial-inclusion guidance encourage SDD in identified lower-risk situations. Over-uniform CDD across a low-risk consumer book is the most common avoidable cost. |
| Perpetual KYC (pKYC) | Largest recurring-cost lever | 60-80% labour saving on periodic review | PwC benchmarks 60-80% labour saving on the periodic-review process for institutions that migrate from scheduled refresh to event-driven perpetual KYC. The implementation cost is the offsetting line. |
| False-positive reduction | Largest ops-labour lever | Each avoided alert is fixed analyst time saved | Legacy monitoring false-positive rates run as high as 95%. Tuning screening thresholds, better data feeds and de-duplication cut the alert volume that drives investigation labour. |
| Procurement / RFP discipline | Largest vendor-invoice lever | 20-40% off published rates at scale | RFP discipline at the £100,000+ vendor-spend mark routinely returns 20-40% off published per-verification rates. Committed-use volume tiers compound the discount. |
| Risk-mix design | Largest blended-cost lever | Blended unit cost scales with the EDD share | Moving from a 25% EDD book to a 5% EDD book roughly halves blended fully-loaded cost. Product and onboarding design that avoids unnecessary high-risk segments is a cost decision, not only a risk decision. |
Sources: FATF Recommendations (February 2025 amendment) and the 22 June 2025 financial-inclusion guidance; PwC Perpetual KYC: A new approach to periodic reviews; LexisNexis Risk Solutions / Forrester True Cost of Financial Crime Compliance; industry RFP benchmarks. Figures are the same anchors used across this site; see the methodology page.
Risk-based simplified due diligence.
The structural lever. A fintech that runs full CDD, repeated screening cycles and manual review across a predominantly low-risk consumer book is spending disproportionately, and the FATF framework now says as much. A documented risk assessment that supports tiered SDD for the genuinely low-risk segment removes screening cycles and ops labour from the largest part of the book. The risk-assessment and policy work is a real cost line, but it pays back several times over because it applies to the highest-volume segment.
The constraint is that SDD has to be earned by a defensible risk assessment, not assumed. Supervisors are now expected to take into account the risk-mitigation measures a firm has in place and to avoid driving overcompliance from a partial understanding of risk. See the CDD vs EDD page for how each diligence tier costs out, and the geography page for how UK, EU and US regimes treat simplified measures.
Perpetual KYC.
The recurring-cost lever. Scheduled periodic review (annual or biennial refresh of the entire active book) is labour-intensive and largely re-verifies customers whose risk has not changed. Perpetual KYC replaces it with event-driven refresh: the file updates when a trigger fires, not on a calendar. PwC benchmarks a 60-80% labour saving on the periodic-review process for institutions that migrate. For a fintech the absolute saving is roughly £4-£8 per active customer per year.
The offsetting line is implementation: small fintechs spend tens of thousands, mid-sized institutions £100k-£500k, large banks several million. The payback is faster the larger and more corporate the active book, because the periodic-review labour being displaced is greater. The full recurring picture sits on the ongoing cost page.
False-positive reduction.
The ops-labour lever. Ops labour is the largest line vendors do not bear, and most of it is spent investigating alerts that turn out to be noise. Legacy monitoring false-positive rates run as high as 95%, and the same effect appears at onboarding where sanctions, PEP and adverse-media checks generate alerts that are mostly false. Because per-alert investigation time is roughly fixed, cutting the alert volume cuts labour close to one-for-one.
The practical levers are threshold tuning, better-scoped and better-quality data feeds, name-matching configuration, and de-duplication of repeat hits on the same entity. A worked illustration: 100,000 onboardings at a 4% hit rate and £6.50 average investigation cost is £26,000 of pure ops labour before escalations; halving the false-positive rate removes a proportionate share. The false-positive cost page carries the full sizing model.
RFP and procurement discipline.
The vendor-invoice lever. Published vendor pricing pages are pitched at startups and SMEs; scale fintechs almost always negotiate. The asymmetry between published and contracted commercials is one of the larger cost-control levers in compliance procurement. RFP discipline at the £100,000+ vendor-spend mark routinely returns 20-40% off published per-verification rates, and committed-use volume tiers compound the discount further.
The single most useful procurement discipline is to decompose the quote: platform fee, committed-use floor, per-verification rate above commit, and per-feature line items (sanctions data, EDD module, ongoing monitoring) priced separately. A bundled quote routinely hides 15-30% of cost that decomposition surfaces. The provider pricing context page sets out the four pricing structures and the volume-discount mechanics in full.
Worked example: risk-mix and SDD on a 100,000-customer book.
The same arithmetic the per-customer cost page uses: £10 CDD baseline plus a £55 EDD overlay, blended by the EDD share of the book. Moving an over-classified book towards a proportionate risk mix is the cleanest illustration of cost reduction without reduced controls, because the high-risk customers keep their full diligence.
The £1.1M difference is entirely the EDD share. This only counts as cost reduction if the reclassified customers were genuinely low-risk and the change is backed by a documented risk assessment; reclassifying a genuinely high-risk customer to save the overlay is a control failure, not a saving. SDD and false-positive reduction stack on top of this by lowering the CDD baseline itself for the low-risk segment.
What not to cut.
EDD on genuinely high-risk customers.
The overlay exists because source-of-funds review, UBO mapping and senior approval mitigate real exposure. Cutting it on customers who genuinely meet a Regulation 33 trigger is the fastest route to a supervisory finding, not a saving.
Ongoing monitoring on the active book.
Perpetual KYC reduces the labour of monitoring; it does not remove the obligation. Dropping monitoring to hit a budget converts a recurring cost line directly into financial-crime exposure on a book that has already been onboarded.
Sanctions data quality.
Switching to a cheaper screening feed without checking list coverage, update frequency and adverse-media depth trades a small per-cycle saving for a missed-hit risk. The sanctions screening cost page sets out what the data line buys.
KYC cost reduction questions
How can a fintech reduce KYC cost without weakening controls?+
Does the FATF 2025 change actually let me spend less on KYC?+
How much does perpetual KYC save?+
Why does false-positive reduction matter so much for cost?+
Is cutting KYC cost a regulatory risk?+
What should a fintech not cut to save on KYC?+
Sources cited on this page
- FATF Recommendations (February 2025 amendment to Recommendation 1) · 'commensurate' replaced with 'proportionate'
- FATF Guidance on Financial Inclusion and AML/CFT Measures (22 June 2025) · SDD strengthened to 'should allow and encourage' in lower-risk situations
- PwC Perpetual KYC: A new approach to periodic reviews · 60-80% labour saving on periodic-review process
- LexisNexis Risk Solutions / Forrester True Cost of Financial Crime Compliance · labour-share benchmarks
- Money Laundering Regulations 2017 (SI 2017/692), Regulation 33 EDD triggers
- Industry RFP benchmarks 2025 (vendor procurement) · 20-40% off published rates at £100k+ spend